This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/NyFZ2eW1WSoY97If0z5zbstqwOc.roa File: NyFZ2eW1WSoY97If0z5zbstqwOc.roa (raw, json) Hash identifier: tzK5PMS/xleldxj4Om3hBpSiQl1y+6+WsVVnD8xC2Jk= Subject key identifier: 37:21:59:D9:E5:B5:59:2A:18:F7:B2:1F:D3:3E:73:6E:CB:6A:C0:E7 Certificate issuer: /CN=598fa4201344d4107f792eee2566c62d65714e2d Certificate serial: 019B7B36400FB44518E5BBE2EF8941B78DB0 Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/NyFZ2eW1WSoY97If0z5zbstqwOc.roa Signing time: Thu 01 Jan 2026 20:18:31 +0000 ROA not before: Thu 01 Jan 2026 20:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39020 IP address blocks: 5.145.168.0/24 maxlen: 24 5.145.169.0/24 maxlen: 24 5.145.170.0/24 maxlen: 24 5.145.171.0/24 maxlen: 24 5.145.172.0/24 maxlen: 24 5.145.173.0/24 maxlen: 24 5.145.174.0/24 maxlen: 24 5.145.175.0/24 maxlen: 24 45.80.12.0/24 maxlen: 24 45.80.14.0/24 maxlen: 24 77.81.112.0/24 maxlen: 24 77.81.113.0/24 maxlen: 24 77.81.114.0/24 maxlen: 24 77.81.115.0/24 maxlen: 24 77.81.116.0/24 maxlen: 24 77.81.117.0/24 maxlen: 24 77.81.118.0/24 maxlen: 24 77.81.119.0/24 maxlen: 24 91.192.108.0/24 maxlen: 24 91.192.109.0/24 maxlen: 24 91.192.110.0/24 maxlen: 24 91.192.111.0/24 maxlen: 24 93.93.64.0/24 maxlen: 24 93.93.65.0/24 maxlen: 24 93.93.66.0/24 maxlen: 24 93.93.67.0/24 maxlen: 24 93.93.68.0/24 maxlen: 24 93.93.69.0/24 maxlen: 24 93.93.70.0/24 maxlen: 24 93.93.71.0/24 maxlen: 24 93.113.160.0/24 maxlen: 24 93.113.161.0/24 maxlen: 24 93.113.162.0/24 maxlen: 24 93.113.163.0/24 maxlen: 24 185.50.196.0/22 maxlen: 22 185.50.196.0/24 maxlen: 24 185.50.197.0/24 maxlen: 24 185.50.198.0/24 maxlen: 24 185.50.199.0/24 maxlen: 24 195.78.228.0/24 maxlen: 24 195.78.229.0/24 maxlen: 24 195.78.230.0/24 maxlen: 24 195.78.231.0/24 maxlen: 24 217.61.128.0/24 maxlen: 24 217.61.129.0/24 maxlen: 24 217.61.130.0/24 maxlen: 24 217.61.131.0/24 maxlen: 24 217.61.133.0/24 maxlen: 24 217.61.134.0/24 maxlen: 24 217.61.135.0/24 maxlen: 24 217.61.136.0/24 maxlen: 24 217.61.137.0/24 maxlen: 24 217.61.138.0/24 maxlen: 24 217.61.139.0/24 maxlen: 24 217.61.140.0/24 maxlen: 24 217.61.141.0/24 maxlen: 24 217.61.142.0/24 maxlen: 24 217.61.143.0/24 maxlen: 24 2a00:1d70::/33 maxlen: 33 2a00:1d70:1ac1::/48 maxlen: 48 2a00:1d70:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:40:0f:b4:45:18:e5:bb:e2:ef:89:41:b7:8d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d Validity Not Before: Jan 1 20:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=372159d9e5b5592a18f7b21fd33e736ecb6ac0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:f0:49:28:e1:b7:65:8a:58:8e:14:ab:e5: 8c:e2:3e:6a:35:ee:8f:e6:f9:92:2d:8a:39:7a:85: 96:dc:0a:75:39:59:17:7c:e4:0d:39:2f:5d:04:c6: d8:b4:c5:01:8c:51:4a:1a:63:95:42:14:6d:7d:7f: 42:eb:22:82:db:59:90:94:b6:11:59:a5:e4:b3:d3: 31:d5:ee:f0:dc:38:8a:69:27:6e:d3:5d:5d:6e:45: 4d:c1:90:3a:6a:bc:1f:38:00:f7:ba:a3:75:1a:88: f0:ab:07:bc:d1:61:47:86:9d:0a:f8:3a:7a:da:a8: 0c:8c:ce:4b:e4:f6:ac:a0:2b:d2:20:0a:eb:e1:c1: b3:21:29:b9:54:92:f7:13:bb:15:ab:ce:67:15:aa: 50:73:e0:ec:f4:56:aa:51:ff:42:1c:82:13:6e:bb: f0:f8:20:4b:12:13:f3:7b:da:dc:44:56:ab:fe:8c: 96:2d:ff:ba:f9:98:8c:01:01:20:b2:02:63:6c:b3: 7f:e7:14:55:10:c9:22:6b:8c:72:b4:47:44:ca:9c: 79:60:6a:98:76:75:18:6c:67:a1:9c:29:4b:5d:b6: 15:32:ea:ef:5a:74:db:b5:96:b0:1b:0b:b0:42:b4: b8:2c:d2:df:bf:d3:86:7e:35:56:80:f8:76:59:9f: 4a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:21:59:D9:E5:B5:59:2A:18:F7:B2:1F:D3:3E:73:6E:CB:6A:C0:E7 X509v3 Authority Key Identifier: keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/NyFZ2eW1WSoY97If0z5zbstqwOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.145.168.0/21 45.80.12.0/24 45.80.14.0/24 77.81.112.0/21 91.192.108.0/22 93.93.64.0/21 93.113.160.0/22 185.50.196.0/22 195.78.228.0/22 217.61.128.0/22 217.61.133.0-217.61.143.255 IPv6: 2a00:1d70::/32 Signature Algorithm: sha256WithRSAEncryption 0e:1a:33:cd:83:06:40:11:47:fa:1f:87:02:f4:47:22:72:12: 8e:0e:9a:bb:99:dc:92:34:f0:94:02:f9:59:75:08:ac:67:63: ec:b8:32:9a:52:ad:fe:10:73:73:03:d5:1c:4a:50:b1:5c:e3: db:0d:67:c4:95:a4:1f:91:9f:c0:ac:dd:0d:af:db:0e:25:89: fe:7c:58:d0:6c:52:30:df:4b:e8:f9:35:09:7b:15:b1:7e:5e: a3:ee:65:72:00:88:80:46:f8:3a:33:58:55:16:56:72:20:69: e7:8e:a7:d4:0d:37:c6:d8:ab:e7:75:12:f3:af:e8:9b:21:83: 16:7e:94:65:cd:81:13:63:f9:19:1f:be:87:db:a9:21:f4:19: 1b:d3:5b:af:5d:40:f4:6a:69:3b:4e:32:0c:1e:3e:da:ab:1c: a9:e2:22:12:4f:2c:6d:92:6f:99:ca:16:7e:66:66:64:d1:13: b9:70:c8:61:fe:3a:64:5b:73:6e:de:69:d8:ac:12:5e:89:76: e6:9b:b4:8d:ae:2d:b9:1e:be:9c:1b:ec:04:a8:d6:2f:38:49: 47:ef:e6:ec:0f:cc:e1:12:5c:35:9a:c6:3f:c5:77:1f:12:31: 73:38:13:99:61:a9:8b:44:68:77:14:51:77:20:30:f9:a2:f6: 92:c7:7e:64 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZt7NkAPtEUY5bvi74lBt42wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5OGZhNDIwMTM0NGQ0MTA3Zjc5MmVlZTI1NjZjNjJkNjU3 MTRlMmQwHhcNMjYwMTAxMjAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzIxNTlkOWU1YjU1OTJhMThmN2IyMWZkMzNlNzM2ZWNiNmFjMGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV3wSSjht2WKWI4Uq+WM4j5qNe6P 5vmSLYo5eoWW3Ap1OVkXfOQNOS9dBMbYtMUBjFFKGmOVQhRtfX9C6yKC21mQlLYR WaXks9Mx1e7w3DiKaSdu011dbkVNwZA6arwfOAD3uqN1Gojwqwe80WFHhp0K+Dp6 2qgMjM5L5PasoCvSIArr4cGzISm5VJL3E7sVq85nFapQc+Ds9FaqUf9CHIITbrvw +CBLEhPze9rcRFar/oyWLf+6+ZiMAQEgsgJjbLN/5xRVEMkia4xytEdEypx5YGqY dnUYbGehnClLXbYVMurvWnTbtZawGwuwQrS4LNLfv9OGfjVWgPh2WZ9K7wIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFDchWdnltVkqGPeyH9M+c27LasDnMB8GA1UdIwQY MBaAFFmPpCATRNQQf3ku7iVmxi1lcU4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2It NjY0YjhmMDNkMTgwLzEvTnlGWjJlVzFXU29ZOTdJZjB6NXpic3Rxd09jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2ItNjY0YjhmMDNkMTgw LzEvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBQBAIAATBKAwQDBZGoAwQA LVAMAwQALVAOAwQDTVFwAwQCW8BsAwQDXV1AAwQCXXGgAwQCuTLEAwQCw07kAwQC 2T2AMAwDBADZPYUDBATZPYAwDQQCAAIwBwMFACoAHXAwDQYJKoZIhvcNAQELBQAD ggEBAA4aM82DBkARR/ofhwL0RyJyEo4OmruZ3JI08JQC+Vl1CKxnY+y4MppSrf4Q c3MD1RxKULFc49sNZ8SVpB+Rn8Cs3Q2v2w4lif58WNBsUjDfS+j5NQl7FbF+XqPu ZXIAiIBG+DozWFUWVnIgaeeOp9QNN8bYq+d1EvOv6JshgxZ+lGXNgRNj+Rkfvofb qSH0GRvTW69dQPRqaTtOMgwePtqrHKniIhJPLG2Sb5nKFn5mZmTRE7lwyGH+OmRb c27eadisEl6JduabtI2uLbkevpwb7ASo1i84SUfv5uwPzOESXDWaxj/Fdx8SMXM4 E5lhqYtEaHcUUXcgMPmi9pLHfmQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:31 2026 by rpki-client